Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa
File:                     3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa (raw, json)
Hash identifier:          nETklQDQNlvaefsbtYFynXouEZXrOsMnNUd7SdVGb4I=
Subject key identifier:   6E:43:C8:BB:FC:09:D2:40:0A:53:52:27:2A:12:83:AA:11:9F:B4:A1
Certificate issuer:       /CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
Certificate serial:       35BA65345A8E829E6C36DAC0CEE7530E0E029B98
Authority key identifier: 4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa
Signing time:             Tue 19 Mar 2024 13:01:15 +0000
ROA not before:           Tue 19 Mar 2024 12:56:15 +0000
ROA not after:            Tue 18 Mar 2025 13:01:15 +0000
asID:                     268323
IP address blocks:        177.125.184.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ba:65:34:5a:8e:82:9e:6c:36:da:c0:ce:e7:53:0e:0e:02:9b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Validity
            Not Before: Mar 19 12:56:15 2024 GMT
            Not After : Mar 18 13:01:15 2025 GMT
        Subject: CN=6E43C8BBFC09D2400A5352272A1283AA119FB4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:30:25:d9:af:5a:2f:36:29:2a:86:c6:ae:
                    65:d9:a0:d5:87:ad:9e:c6:a1:c4:2c:6a:a7:08:13:
                    18:85:84:f5:43:02:e3:a1:b2:0f:70:55:22:58:1c:
                    4b:61:ed:4e:75:2e:67:6d:e6:ee:d1:39:66:8c:3f:
                    1a:fc:55:02:3e:6c:00:7e:10:6c:c7:87:27:7e:fd:
                    eb:84:69:d4:c5:14:d8:a4:b4:f1:ad:c0:95:4e:bc:
                    b7:86:e0:c0:08:60:68:46:e0:32:98:66:14:9a:d6:
                    97:02:89:a3:81:1e:6e:28:d2:d9:dc:ba:f6:c3:04:
                    8d:a4:84:31:a8:03:2f:0e:63:54:1b:59:99:9d:26:
                    ed:d1:7a:30:bc:cc:17:5e:94:66:fa:26:99:33:cb:
                    d6:39:e5:37:e2:ec:e0:3b:df:d0:a6:e4:8c:54:18:
                    0b:70:d1:97:78:0a:2e:5c:e0:f6:aa:cc:6f:53:01:
                    60:89:d0:5d:f1:cd:bf:62:ea:00:49:4b:75:64:8d:
                    42:de:25:81:76:1d:3f:27:fe:78:a3:ed:48:b7:75:
                    2b:d4:ff:9e:8f:c2:15:30:6d:d0:c6:f0:74:7a:58:
                    2f:02:da:21:c2:ee:58:c4:2b:76:7e:9d:8f:29:57:
                    2c:f7:12:46:7a:85:a7:a3:7e:6b:8e:78:ec:6a:a5:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:43:C8:BB:FC:09:D2:40:0A:53:52:27:2A:12:83:AA:11:9F:B4:A1
            X509v3 Authority Key Identifier:
                keyid:4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/3137372e3132352e3138342e302f32322d3234203d3e20323638333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.125.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:ed:44:e0:b7:a1:bd:de:43:bc:20:30:db:99:b7:cf:04:45:
         10:f3:02:81:69:c9:7d:fb:68:ed:64:ec:f2:f3:f2:45:a6:e2:
         62:35:71:1c:26:71:5c:16:a4:fa:64:ec:d6:56:65:94:69:20:
         28:56:38:8c:7d:b6:95:8e:dd:af:d7:a2:fa:5d:fc:b2:03:46:
         94:68:fa:c5:84:ed:38:19:b6:5b:b4:bd:79:72:1d:40:3b:1b:
         6b:7c:53:cc:80:83:1d:c4:0c:7d:57:ff:d0:48:bd:62:39:66:
         89:5d:d0:06:c7:20:4e:2d:75:a5:2e:63:51:dd:43:95:01:63:
         16:92:45:68:c2:a5:65:31:7e:69:08:f5:d1:b2:f1:08:7a:c9:
         41:85:68:0f:d2:a8:6a:07:10:6d:83:02:45:58:88:1c:3a:33:
         77:b7:5b:8e:ce:e6:fa:88:79:12:c2:1a:37:32:c1:a7:a7:2b:
         d6:03:ee:a3:31:e5:68:3c:87:7d:74:82:af:a3:12:e6:02:0b:
         d4:b5:c4:fa:d8:e5:91:59:7a:f0:54:81:30:74:6d:61:b8:9c:
         3a:ad:a6:ed:1b:42:6e:ef:57:70:b7:d5:8e:f5:13:e0:52:ce:
         38:a9:41:94:a4:ca:37:89:ca:f7:87:19:7e:91:4f:98:82:e4:
         aa:e3:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org